Openclaw cli: OpenClaw: Gateway `operator.write` can reach admin-only persisted `verboseLevel` via `chat.send` `/verbose` (CVE-2026-41344)
Description
A vulnerability in openclaw-cli allows write-scoped authorized users to persist verbose output session overrides via the chat.send path, which should be restricted to admin-only access through sessions.patch. This could lead to unintended exposure of verbose output or tool reasoning beyond intended operator limits. The issue affects versions from 2026.1.29 up to but not including 2026.3.28. The vulnerability is fixed in version 2026.3.28.
CVSS v3.1
Score 5.4medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The openclaw-cli vulnerability (CVE-2026-41344) involves the chat.send gateway path permitting authorized users with write scope to persist session overrides for verbose output using the `/verbose` command. This persisted verboseLevel setting is normally restricted to admin-only access via sessions.patch. The flaw allows these users to retain verbose output settings across sessions, potentially exposing more detailed reasoning or tool output than intended. The issue affects versions >=2026.1.29 and <2026.3.28 and was fixed in commit c603123528, requiring admin privileges for persisted verbose defaults.
Potential Impact
An attacker or user with write-scoped authorization can persist verbose output settings that are normally restricted to administrators. This persistence could expose additional internal reasoning or tool output in subsequent sessions, potentially leaking sensitive operational details. The impact is limited to information disclosure with no direct integrity or availability impact.
Mitigation Recommendations
A patch is available and included in openclaw-cli version 2026.3.28 and later. Users should upgrade to version 2026.3.28 or newer to remediate this vulnerability. No additional mitigation steps are required if the patch is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-41344
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245a412601ec6a316619b
Added to database: 10/04/2026, 12:25:08 UTC
Last enriched: 10/04/2026, 12:50:06 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.